sophos-central-mcp-server 0.1.1 → 0.1.3

package/dist/tools/health.d.ts

@@ -1,6 +1,5 @@
 /**
- * Tool: sophos_get_account_health
- * Retrieves account health check scores from the Sophos Common API.
+ * Tools: sophos_get_account_health, sophos_list_account_health
  */
 import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import type { SophosClient } from "../client/sophos-client.js";

package/dist/tools/health.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../src/tools/health.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAGnE,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,YAAY,EACpB,cAAc,EAAE,cAAc,GAC7B,IAAI,CAuCN"}
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../src/tools/health.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAyBnE,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,YAAY,EACpB,cAAc,EAAE,cAAc,GAC7B,IAAI,CAyIN"}

package/dist/tools/health.js

@@ -1,18 +1,39 @@
 /**
- * Tool: sophos_get_account_health
- * Retrieves account health check scores from the Sophos Common API.
+ * Tools: sophos_get_account_health, sophos_list_account_health
  */
 import { z } from "zod";
 import { jsonResult, withErrorHandling } from "./helpers.js";
+const HEALTH_PATH = "/account-health-check/v1/health-check";
+const CONCURRENCY = 10;
+/**
+ * Extracts the minimum overall score from a health check response.
+ * Checks both endpoint and server protection globalDetail scores.
+ * Returns null if no health data is available.
+ */
+function extractOverallScore(data) {
+    if (!data)
+        return null;
+    const scores = [];
+    for (const section of ["endpoint", "server"]) {
+        const s = data[section];
+        const protection = s?.["protection"];
+        const globalDetail = protection?.["globalDetail"];
+        if (typeof globalDetail?.["score"] === "number") {
+            scores.push(globalDetail["score"]);
+        }
+    }
+    return scores.length > 0 ? Math.min(...scores) : null;
+}
 export function registerHealthTools(server, client, tenantResolver) {
     server.registerTool("sophos_get_account_health", {
         title: "Get Sophos Account Health",
-        description: `Get the account health check scores for a Sophos Central tenant.
+        description: `Get the account health check scores for a single Sophos Central tenant.
 
 Returns protection percentages and status for endpoints and servers,
 including policy compliance, exclusion health, and tamper protection status.
 
-Useful for a quick overview of tenant security posture.
+For partner/org callers who need to compare health across multiple tenants,
+use sophos_list_account_health instead — it fetches all tenants in parallel.
 
 Args:
   - tenant_id (string, optional): Tenant ID. Required for partner/org callers.
@@ -33,8 +54,86 @@ Returns:
         },
     }, withErrorHandling(async ({ tenant_id }) => {
         const resolvedTenantId = tenantResolver.resolveTenantId(tenant_id);
-        const data = await client.tenantRequest(resolvedTenantId, "/account-health-check/v1/health-check");
+        const data = await client.tenantRequest(resolvedTenantId, HEALTH_PATH);
         return jsonResult(data);
     }));
+    // Bulk health tool: only useful for partner/org callers who manage multiple tenants
+    if (tenantResolver.getIdentity().idType !== "tenant") {
+        server.registerTool("sophos_list_account_health", {
+            title: "List Account Health for All Tenants",
+            description: `Fetch account health scores for all managed tenants in parallel and return a ranked summary.
+
+Use this when you need to compare health across tenants or find tenants with the lowest
+scores. Much faster than calling sophos_get_account_health per tenant — fetches all
+tenants concurrently server-side in a single tool call.
+
+Results are sorted by overall score ascending (lowest/worst first).
+Tenants with no health data (no enrolled products) are listed last.
+
+Args:
+  - limit (number, optional): Return only the N lowest-scoring tenants. Useful for
+    "show me the 10 worst tenants". Omit to return all tenants.
+
+Returns:
+  Array of tenants with their health scores and full health detail, sorted worst-first.`,
+            inputSchema: {
+                limit: z
+                    .number()
+                    .int()
+                    .min(1)
+                    .max(500)
+                    .optional()
+                    .describe("Return only the N lowest-scoring tenants (default: all)."),
+            },
+            annotations: {
+                readOnlyHint: true,
+                destructiveHint: false,
+                idempotentHint: true,
+                openWorldHint: true,
+            },
+        }, withErrorHandling(async ({ limit }) => {
+            const tenants = tenantResolver.getCachedTenants();
+            const results = [];
+            for (let i = 0; i < tenants.length; i += CONCURRENCY) {
+                const batch = tenants.slice(i, i + CONCURRENCY);
+                const batchResults = await Promise.all(batch.map(async (tenant) => {
+                    try {
+                        const data = await client.tenantRequest(tenant.id, HEALTH_PATH);
+                        return {
+                            tenant_id: tenant.id,
+                            tenant_name: tenant.name,
+                            overall_score: extractOverallScore(data),
+                            health: data,
+                        };
+                    }
+                    catch {
+                        return {
+                            tenant_id: tenant.id,
+                            tenant_name: tenant.name,
+                            overall_score: null,
+                            health: null,
+                        };
+                    }
+                }));
+                results.push(...batchResults);
+            }
+            // Sort: lowest score first, null (no data) last
+            results.sort((a, b) => {
+                if (a.overall_score === null && b.overall_score === null)
+                    return 0;
+                if (a.overall_score === null)
+                    return 1;
+                if (b.overall_score === null)
+                    return -1;
+                return a.overall_score - b.overall_score;
+            });
+            const limited = limit !== undefined ? results.slice(0, limit) : results;
+            return jsonResult({
+                total_tenants: tenants.length,
+                returned: limited.length,
+                tenants: limited,
+            });
+        }));
+    }
 }
 //# sourceMappingURL=health.js.map

package/dist/tools/health.js.map

@@ -1 +1 @@
-{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/tools/health.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAE7D,MAAM,UAAU,mBAAmB,CACjC,MAAiB,EACjB,MAAoB,EACpB,cAA8B;IAE9B,MAAM,CAAC,YAAY,CACjB,2BAA2B,EAC3B;QACE,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE;;;;;;;;;;;yEAWsD;QACnE,WAAW,EAAE;YACX,SAAS,EAAE,CAAC;iBACT,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,8CAA8C,CAAC;SAC5D;QACD,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB;KACF,EACD,iBAAiB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;QACxC,MAAM,gBAAgB,GAAG,cAAc,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,aAAa,CACrC,gBAAgB,EAChB,uCAAuC,CACxC,CAAC;QACF,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,CACH,CAAC;AACJ,CAAC"}
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/tools/health.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAE7D,MAAM,WAAW,GAAG,uCAAuC,CAAC;AAC5D,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,IAAoC;IAC/D,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,OAAO,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAwC,CAAC;QAC/D,MAAM,UAAU,GAAG,CAAC,EAAE,CAAC,YAAY,CAAwC,CAAC;QAC5E,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC,cAAc,CAAwC,CAAC;QACzF,IAAI,OAAO,YAAY,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAW,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,MAAiB,EACjB,MAAoB,EACpB,cAA8B;IAE9B,MAAM,CAAC,YAAY,CACjB,2BAA2B,EAC3B;QACE,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE;;;;;;;;;;;;yEAYsD;QACnE,WAAW,EAAE;YACX,SAAS,EAAE,CAAC;iBACT,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,8CAA8C,CAAC;SAC5D;QACD,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB;KACF,EACD,iBAAiB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;QACxC,MAAM,gBAAgB,GAAG,cAAc,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,aAAa,CACrC,gBAAgB,EAChB,WAAW,CACZ,CAAC;QACF,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,CACH,CAAC;IAEF,oFAAoF;IACpF,IAAI,cAAc,CAAC,WAAW,EAAE,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACrD,MAAM,CAAC,YAAY,CACjB,4BAA4B,EAC5B;YACE,KAAK,EAAE,qCAAqC;YAC5C,WAAW,EAAE;;;;;;;;;;;;;;wFAcmE;YAChF,WAAW,EAAE;gBACX,KAAK,EAAE,CAAC;qBACL,MAAM,EAAE;qBACR,GAAG,EAAE;qBACL,GAAG,CAAC,CAAC,CAAC;qBACN,GAAG,CAAC,GAAG,CAAC;qBACR,QAAQ,EAAE;qBACV,QAAQ,CAAC,0DAA0D,CAAC;aACxE;YACD,WAAW,EAAE;gBACX,YAAY,EAAE,IAAI;gBAClB,eAAe,EAAE,KAAK;gBACtB,cAAc,EAAE,IAAI;gBACpB,aAAa,EAAE,IAAI;aACpB;SACF,EACD,iBAAiB,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YACpC,MAAM,OAAO,GAAG,cAAc,CAAC,gBAAgB,EAAE,CAAC;YAUlD,MAAM,OAAO,GAAkB,EAAE,CAAC;YAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC;gBACrD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC;gBAChD,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,CACpC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;oBACzB,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,aAAa,CACrC,MAAM,CAAC,EAAE,EACT,WAAW,CACZ,CAAC;wBACF,OAAO;4BACL,SAAS,EAAE,MAAM,CAAC,EAAE;4BACpB,WAAW,EAAE,MAAM,CAAC,IAAI;4BACxB,aAAa,EAAE,mBAAmB,CAAC,IAAI,CAAC;4BACxC,MAAM,EAAE,IAAI;yBACb,CAAC;oBACJ,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO;4BACL,SAAS,EAAE,MAAM,CAAC,EAAE;4BACpB,WAAW,EAAE,MAAM,CAAC,IAAI;4BACxB,aAAa,EAAE,IAAI;4BACnB,MAAM,EAAE,IAAI;yBACb,CAAC;oBACJ,CAAC;gBACH,CAAC,CAAC,CACH,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;YAChC,CAAC;YAED,gDAAgD;YAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBACpB,IAAI,CAAC,CAAC,aAAa,KAAK,IAAI,IAAI,CAAC,CAAC,aAAa,KAAK,IAAI;oBAAE,OAAO,CAAC,CAAC;gBACnE,IAAI,CAAC,CAAC,aAAa,KAAK,IAAI;oBAAE,OAAO,CAAC,CAAC;gBACvC,IAAI,CAAC,CAAC,aAAa,KAAK,IAAI;oBAAE,OAAO,CAAC,CAAC,CAAC;gBACxC,OAAO,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC;YAC3C,CAAC,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAExE,OAAO,UAAU,CAAC;gBAChB,aAAa,EAAE,OAAO,CAAC,MAAM;gBAC7B,QAAQ,EAAE,OAAO,CAAC,MAAM;gBACxB,OAAO,EAAE,OAAO;aACjB,CAAC,CAAC;QACL,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;AACH,CAAC"}

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "sophos-central-mcp-server",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "MCP server for Sophos Central API - SOC monitoring, endpoint management, and admin automation",
   "type": "module",
   "main": "dist/index.js",
   "bin": {
-    "sophos-central-mcp": "dist/index.js"
+    "sophos-central-mcp": "dist/index.js",
+	"sophos-central-mcp": "dist/index.js"
   },
   "scripts": {
     "build": "tsc",